$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ed4a08-90e9-344d-8c01-1424f143d70a.roa File: e2ed4a08-90e9-344d-8c01-1424f143d70a.roa (raw, json) Hash identifier: a/lq7Ek4Qn23+JPbNlBrZee7kHSzKorFcmR9jGAj+HA= Subject key identifier: 4B:D3:90:8E:5C:AE:E4:65:33:4D:C8:0C:56:A3:06:96:1B:5A:E6:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584EA78741A7187413A717AD0CBE Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ed4a08-90e9-344d-8c01-1424f143d70a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7029 IP address blocks: 98.23.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:41:a7:18:74:13:a7:17:ad:0c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1557b611-d0b0-4284-8ab4-f25c94b10980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9c:f1:c7:a7:7e:07:35:0a:26:fa:1f:38:37: 99:53:e9:6b:3a:b0:d1:a7:f2:f0:14:af:76:00:d0: f0:8e:f1:10:1e:ee:de:4e:39:53:a7:61:27:e9:a5: 0a:32:9c:ad:44:8e:5d:d5:4c:47:96:a7:04:22:10: 45:85:2b:5a:ff:a9:f3:94:f1:cf:82:76:df:f4:82: 2b:75:2d:39:07:4c:c3:06:41:7f:c8:64:0d:55:2e: 75:f1:12:dc:28:7b:ae:84:af:b0:d6:87:f0:6c:ce: 0c:5b:cd:df:bc:12:28:28:16:23:ca:97:be:b9:bc: 17:58:fc:2f:7b:a3:64:9d:42:da:3a:20:c7:55:9f: 65:4a:2f:74:76:3a:f1:25:ae:64:14:66:9d:1c:05: 5a:5d:b8:48:db:8a:fb:38:fd:5e:aa:aa:07:42:17: 55:bc:21:2d:6e:0f:4a:d3:4b:6b:50:c9:8e:5c:eb: c7:d1:b2:97:54:40:3b:3c:61:b3:29:3e:1a:68:49: 5a:77:01:16:76:14:f9:90:a9:c7:f5:e3:b9:7f:f0: c4:e1:e7:1a:07:a2:3c:2b:a8:9f:0a:dd:e3:d1:3a: c5:05:f6:98:1e:99:e6:32:3d:26:e0:ac:ba:55:c9: c9:0d:ee:df:56:6a:9f:b6:02:bd:9f:7c:a0:cd:f2: e7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D3:90:8E:5C:AE:E4:65:33:4D:C8:0C:56:A3:06:96:1B:5A:E6:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e2ed4a08-90e9-344d-8c01-1424f143d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:0b:11:16:46:67:5e:87:c1:1e:ee:bb:86:3b:a5:df:e6:47: 0a:76:ea:52:97:00:25:eb:ab:6f:35:17:8d:5b:d9:8c:46:8f: ce:13:25:11:20:c7:9d:5c:8d:7b:27:18:1a:2a:fa:61:a6:a5: 94:6a:9c:67:ed:9d:6c:02:41:f7:37:74:76:27:f7:ff:bf:ea: dc:58:59:a8:23:5f:a4:db:d7:f6:ac:cb:15:74:52:a8:86:00: 05:da:2b:e3:ea:22:46:58:c7:87:cc:af:07:55:f7:cd:71:56: 08:6c:20:f2:c7:e3:10:ba:34:e8:d8:9d:b8:c3:30:f8:03:00: a0:8d:17:57:c2:32:d9:7f:39:53:f1:80:c3:22:b5:02:f1:57: 0d:2c:14:91:b4:d6:f5:ed:97:57:36:ad:ba:41:61:59:32:98: 93:82:62:d6:00:a3:62:61:2b:be:ce:ab:ff:59:b2:55:3f:61: 24:b1:e6:09:82:58:78:05:3d:a8:44:a4:c0:af:68:bf:96:29: fa:9d:3e:b4:86:9e:b6:b6:da:d9:c3:49:4f:b4:04:42:1b:4b: 65:ba:e8:89:11:1d:ef:4f:89:bd:3c:ea:75:99:7a:f3:94:c6: c8:4b:46:1c:8c:4d:3a:a2:29:2d:13:cd:48:bd:52:64:36:2e: 2f:70:01:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh0GnGHQTpxetDL4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTU1N2I2MTEtZDBiMC00Mjg0LThhYjQtZjI1Yzk0YjEwOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pzxx6d+BzUKJvofODeZU+lrOrDRp/LwFK92 ANDwjvEQHu7eTjlTp2En6aUKMpytRI5d1UxHlqcEIhBFhSta/6nzlPHPgnbf9IIr dS05B0zDBkF/yGQNVS518RLcKHuuhK+w1ofwbM4MW83fvBIoKBYjype+ubwXWPwv e6NknULaOiDHVZ9lSi90djrxJa5kFGadHAVaXbhI24r7OP1eqqoHQhdVvCEtbg9K 00trUMmOXOvH0bKXVEA7PGGzKT4aaEladwEWdhT5kKnH9eO5f/DE4ecaB6I8K6if Ct3j0TrFBfaYHpnmMj0m4Ky6VcnJDe7fVmqftgK9n3ygzfLnbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvTkI5cruRlM03IDFajBpYbWubwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTJlZDRhMDgtOTBlOS0z NDRkLThjMDEtMTQyNGYxNDNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADULERZGZ16HwR7uu4Y7pd/mRwp26lKXACXrq281F41b2YxGj84TJREg x51cjXsnGBoq+mGmpZRqnGftnWwCQfc3dHYn9/+/6txYWagjX6Tb1/asyxV0UqiG AAXaK+PqIkZYx4fMrwdV981xVghsIPLH4xC6NOjYnbjDMPgDAKCNF1fCMtl/OVPx gMMitQLxVw0sFJG01vXtl1c2rbpBYVkymJOCYtYAo2JhK77Oq/9ZslU/YSSx5gmC WHgFPahEpMCvaL+WKfqdPrSGnra22tnDSU+0BEIbS2W66IkRHe9Pib086nWZevOU xshLRhyMTTqiKS0TzUi9UmQ2Li9wAeg= -----END CERTIFICATE-----Generated at Thu Aug 27 12:29:10 2026 by rpki-client